[Zope] Re: security.declarePrivate allows access to all authenticatedusers

Chris Withers chrisw@nipltd.com
Wed, 29 Aug 2001 08:54:29 +0100


Itai Tavor wrote:
> 
> >Foolish old trusting me thought that 'test' would not be accessible
> >from restricted code. And it really isn't accessible to anonymous
> >users, but is freely accessible to all authenticated users.

Sounds like a pretty nasty bug, stick it in the collector...

cheers,

Chris